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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1-10 (canceled) 

1 1 . (currently amended) A gateway support node comprising one or more receiversrone-er 
more detectors, and one or more controllers and one or more recovery elements , the gateway 
support node configured to: 

provide an interface between an external packet data communications network and a 
packet radio network, the packet radio network providing a plurality of packet data bearers for 
communicating internet Internet packets with nodes attached to the packet radio network, each of 
the packet data bearers being defined with respect to a source home address of nodes 
communicating the internet Internet packets, the gateway support node being further configured 

to receive an int e rn e t Internet packet with the one or more receivers , the int e rn e t Internet 

packet comprising: 

a header field, the header field including: 

a source field identifying a source address of the internet Internet packet, 
a destination field identifying a destination address of the int e rn e t Internet 
packet, and 

a next header field identifying whether an extension header follows the 
header field, a type of the extension header, and whether the extension header 
includes a hop-by-hop extension header, the hop-by-hop extension header 
comprising: 

a router alert option header indicating that the remainder of the 
hop-by-hop extension header is optional for a router to read, and 

a value field indicating that the remainder of the hop-by-hop 
header is provided for the gateway support node, wherein the remainder of 
the hop-by-hop extension header includes a home field providing a home 
address of a mobile node, 
to detect that the next header field of the internet Internet packet includes the hop-by-hop 
extension header with the one or more detectors , and 
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to detect the router alert option header in the hop-by-hop extension header and the value 
field indicating that the remainder of the hop-by-hop extension header is provided for the 
gateway support node with at least one of the one or more detectors , and upon detecting the value 
field indicating that the remainder of the hop-by-hop extension header field is for the gateway 
support node, 

to recover information from a field provided in the remainder of the hop-by-hop 
extension header with the one or more recovery elements for use in controlling egress and/or 
ingress of internet Internet packets to the packet radio network in accordance with the 
information, and 

to control ingress of internet Internet packets from the external communications network 
to the packet data bearers of the packet radio network with the one or more controllers by: 

detecting from the information field provided in the remainder of the hop-by-hop 
extension header, a source home address of a mobile correspondent node communicating 
the internet Internet packets, 

using the source home address of the mobile correspondent node to identify the 
packet data bearer for communicating the internet Internet packets to a correspondent 
node attached to the packet radio network, and 

allowing ingress of the internet Internet packets to the identified packet data 

bearer, 

the gateway support node being operable upon receipt of the internet Internet packet. 

12. (currently amended) A gateway support node as claimed in Claim 1 1 , the gateway support 
node 

allowing ingress of the internet Internet packets if either the address in the source address 
field of the internet Internet packet or the address provided in the field in hop-by-hop extension 
header for the gateway support node corresponds to a packet data bearer. 

13. (currently amended) A gateway support node as claimed in Claim 1 1, the gateway support 
node 

performing egress packet filtering in accordance with a destination address of the internet 
Internet packets received from the plurality of packet data bearers, egress of the internet Internet 
packets being allowed for internet Internet packets having a legitimate destination address, and 
upon receipt of the internet Internet packet, 
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detecting from the information data provided in the hop-by-hop extension header field for 
the gateway support node a destination home address of a mobile correspondent node which is to 
be the destination of the internet Internet packets, and 

allowing egress of the internet Internet packets if the gateway support node recognizes the 
destination home address as a legitimate home address. 

14. (currently amended) A gateway support node as claimed in Claim 13, the gateway support 
node allowing egress of the internet Internet packets if either the address in the destination 
address field of the packet or the address provided in the hop-by-hop extension header for the 
gateway support node is a legitimate destination address. 

15. (previously presented) A gateway support node as claimed in Claim 1 1 , wherein the 
gateway support node comprises a Gateway GPRS Support Node (GGSN), according to the 
General Packet Radio System standard. 

16. (currently amended) A packet radio network for communicating internet Internet packets 
between an external packet data network and nodes associated with the packet radio network, the 
packet radio network providing a plurality of packet data bearers for communicating the int e rn e t 
Internet packets to and/or from the nodes attached to the packet radio network, the packet radio 
network including a gateway support node as claimed in Claim 1 1 . 

17. (previously presented) A packet radio network as claimed in Claim 16, wherein the 
packet radio network complies with the General Packet Radio System (GPRS) standard, the 
gateway support node comprising a Gateway GPRS Support Node (GGSN). 

18. (currently amended) A method of operating a gateway support node to interface between 
an external packet data communications network and a packet radio network, the packet radio 
network providing a plurality of packet data bearers for communicating the internet Internet 
packets with nodes attached to the packet radio network, each of the packet data bearers being 
defined with respect to a source home address of the nodes communicating the internet Internet 
packets, the method comprising 

receiving an internet Internet packet comprising a header field, the header field including 
a field identifying a source address of the internet Internet packet, a field identifying a destination 
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address of the internet Internet packet and a next header field identifying whether an extension 
header follows the header and a type of the extension header, the next header field identifying 
that the extension header includes a hop-by-hop extension header, the hop-by-hop extension 
header including a router alert option header indicating that the remainder of the hop-by-hop 
extension header is optional for a router to read, and a value field indicating that the remainder of 
the hop-by-hop header is provided for the gateway support node of the packet radio network, the 
remainder of the hop-by-hop extension header including a field providing a home address of a 
mobile node, 

detecting that the next header field of the internet Internet packet identifying that the an 
extension header includes the hop-by-hop extension header, 

detecting the router alert option header and the value field in the hop-by-hop extension 
header indicating that the remainder of the hop-by-hop header is provided for the gateway 
support node, and upon detecting the value field indicating that the remainder of the hop-by-hop 
extension header field is for the gateway support node, 

recovering from a field provided in the remainder of the hop-by-hop extension header 
information for use in controlling egress and/or ingress of internet Internet packets to the packet 
radio network in accordance with the information, 

wherein, the controlling the ingress of internet Internet packets from the external 
communications network to the packet data bearers of the packet radio network in accordance 
with the information, includes 

detecting from the information field provided in the remainder of the hop-by-hop 
extension header field a source home address of a mobile correspondent node communicating the 
internet Internet packets, using the source home address of the mobile correspondent node to 
identify the packet data bearer for communicating the internet Internet packets to a correspondent 
node attached to the packet radio network, and 

allowing ingress of the internet Internet packets to the identified packet data bearer, and 
otherwise dropping the internet Internet packet. 

19. (currently amended) A method as claimed in Claim 18, the method comprising 

performing egress packet filtering in accordance with a destination address of internet 
Internet packets received from the plurality of packet data bearers, egress of internet Internet 
packets being allowed for internet Internet packets having a legitimate destination address, and 
upon receipt of the internet Internet packet, 
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detecting from information provided in the remainder of the hop-by-hop extension header 
field for the gateway support node a destination home address of a mobile correspondent node 
which is to be the destination of the internet Internet packets, and 

allowing egress of internet Internet packets if the gateway support node recognises the 
destination home address as a legitimate home address. 

20-23 (canceled) 

24. (currently amended) A computer readable memory device comprising computer 
executable instructions forming a computer program to be executed by a data processor within a 
computer, the program comprising: 

receiving an internet Internet packet comprising a header field, the header field including 
a field identifying a source address of the internet Internet packet, a field identifying a destination 
address of the int e rn e t Internet packet and a next header field identifying whether an extension 
header follows the header and a type of the extension header, the next header field identifying 
that the extension header includes a hop-by-hop extension header, the hop-by-hop extension 
header including a router alert option header indicating that the remainder of the hop-by-hop 
extension header is optional for a router to read, and a value field indicating that the remainder of 
the hop-by-hop header is provided for the gateway support node of the packet radio network, the 
remainder of the hop-by-hop extension header including a field providing a home address of a 
mobile node, 

detecting that the next header field of the internet Internet packet identifying tha t the an 
extension header includes the hop-by-hop extension header, 

detecting the router alert option header and the value field in the hop-by-hop extension 
header indicating that the remainder of the hop-by-hop header is provided for the gateway 
support node, and upon detecting the value field indicating that the remainder of the hop-by-hop 
extension header field is for the gateway support node, 

recovering from a field provided in the remainder of the hop-by-hop extension header 
information for use in controlling egress and/or ingress of internet Internet packets to the packet 
radio network in accordance with the information, 

wherein, the controlling the ingress of internet Internet packets from the external 
communications network to the packet data bearers of the packet radio network in accordance 
with the information, includes 
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detecting from the information field provided in the remainder of the hop-by-hop 
extension header field a source home address of a mobile correspondent node communicating the 
internet Internet packets, using the source home address of the mobile correspondent node to 
identify the packet data bearer for communicating the internet Internet packets to a correspondent 
node attached to the packet radio network, and 

allowing ingress of the internet Internet packets to the identified packet data bearer, and 
otherwise dropping the internet Internet packet. 

25. (canceled) 

26. (currently amended) A gateway support node as claimed in Claim 12, the gateway support 
node 

performing egress packet filtering in accordance with a destination address of the internet 
Internet packets received from the plurality of packet data bearers, egress of the internet Internet 
packets being allowed for int e rnet Internet packets having a legitimate destination address, and 
upon receipt of the int e rn e t Internet packet, 

detecting from the information data provided in the hop-by-hop extension header field for 
the gateway support node a destination home address of a mobile correspondent node which is to 
be the destination of the internet Internet packets, and 

allowing egress of the internet Internet packets if the gateway support node recognizes the 
destination home address as a legitimate home address. 

27. (currently amended) A gateway support node as claimed in Claim 26, the gateway support 
node allowing egress of the internet Internet packets if either the address in the destination 
address field of the packet or the address provided in the hop-by-hop extension header for the 
gateway support node is a legitimate destination address. 

28. (currently amended) A computer readable memory device comprising computer 
executable instructions forming a computer program to be executed by a data processor within a 
computer, the program comprising: 

receiving an internet Internet packet comprising a header field, the header field including 
a field identifying a source address of the internet Internet packet, a field identifying a destination 
address of the internet Internet packet and a next header field identifying whether an extension 
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header follows the header and a type of the extension header, the next header field identifying 
that the extension header includes a hop-by-hop extension header, the hop-by-hop extension 
header including a router alert option header indicating that the remainder of the hop-by-hop 
extension header is optional for a router to read, and a value field indicating that the remainder of 
the hop-by-hop header is provided for the gateway support node of the packet radio network, the 
remainder of the hop-by-hop extension header including a field providing a home address of a 
mobile node, 

detecting that the next header field of the internet Internet packet identifying that the an 
extension header includes the hop-by-hop extension header, 

detecting the router alert option header and the value field in the hop-by-hop extension 
header indicating that the remainder of the hop-by-hop header is provided for the gateway 
support node, and upon detecting the value field indicating that the remainder of the hop-by-hop 
extension header field is for the gateway support node, 

recovering from a field provided in the remainder of the hop-by-hop extension header 
information for use in controlling egress and/or ingress of internet Internet packets to the packet 
radio network in accordance with the information, 

wherein, the controlling the ingress of internet Internet packets from the external 
communications network to the packet data bearers of the packet radio network in accordance 
with the information, includes 

detecting from the information field provided in the remainder of the hop-by-hop 
extension header field a source home address of a mobile correspondent node communicating the 
internet Internet packets, using the source home address of the mobile correspondent node to 
identify the packet data bearer for communicating the internet Internet packets to a correspondent 
node attached to the packet radio network, and 

allowing ingress of the internet Internet packets to the identified packet data bearer, and 
otherwise dropping the internet Internet packet, 

performing egress packet filtering in accordance with a destination address of internet 
Internet packets received from the plurality of packet data bearers, egress of internet Internet 
packets being allowed for internet Internet packets having a legitimate destination address, and 
upon receipt of the internet Internet packet, 

detecting from information provided in the remainder of the hop-by-hop extension header 
field for the gateway support node a destination home address of a mobile correspondent node 
which is to be the destination of the internet Internet packets, and 
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allowing egress of internet Internet packets if the gateway support node recognises the 
destination home address as a legitimate home address. 

29. (canceled) 

30. (currently amended) A gateway support node comprising one or more receivers , one or 
more detectors, and one or more controllers and one or more recovery elements , the 
gateway support node configured: 

to provide an interface between an external packet data communications network and a 
packet radio network, the packet radio network providing a plurality of packet data bearers for 
communicating user data packets with nodes attached to the packet radio network, each of the 
packet data bearers being defined w ith respect to a source home address of nodes communicating 
the user data packets, 

to receive a user data packet comprising a header field with the one or more receivers , the 

header field including: 

a source field identifying a source address of the user data packet, 
a destination field identifying a destination address of the user data packet and 
a next header field identifying whether an IPv6 extension header follows the 
header, a type of the extension header, and whether the extension header includes a hop- 
by-hop extension header, the hop-by-hop extension header comprising: 

a router alert option header indicating that the remainder of the hop-by- 
hop extension header is optional for a router to read, and 

a value field indicating that the remainder of the hop-by-hop header is 
provided for the gateway support node, wherein the remainder of the hop-by-hop 
extension header includes a home field providing a home address of a mobile 
node, 

to detect that the next header field of the user data packet includes the hop-by-hop 
extension header with the one or more detectors , and 

to detect the router alert option header in the hop-by-hop extension header and the value 
field indicating that the remainder of the hop-by-hop extension header is provided for the 
gateway support node with at least one of the one or more detectors , and upon detecting the value 
field indicating that the remainder of the hop-by-hop extension header field is for the gateway 
support node, 
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to recover information from a field provided in the remainder of the hop-by-hop 
extension header with the one or more recovery elements for use in controlling egress and/or 
ingress of the user data packets to the packet radio network in accordance with the information, 
and 

to control ingress of the user data packets from the external communications network to 
the packet data bearers of the packet radio network with the one or more controllers by: 

detecting from the information field provided in the remainder of the hop-by-hop 
extension header a source home address of a mobile correspondent node communicating 
the user data packets, 

using the source home address of the mobile correspondent node to identify the 
packet data bearer for communicating the user data packets to a correspondent node 
attached to the packet radio network, and 

allowing ingress of the user data packets to the identified packet data bearer, 
the gateway support node being operable upon receipt of the user data packet. 
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